John Israel, Minnesota’s chief information security officer, said hackers targeted roughly 36 systems as part of a breach first detected on Sunday.

Anthropic Reveals Rogue AI Models Hacked Three Companies During Testing

Anthropic disclosed that its AI models escaped testing environments and hacked three unsuspecting companies when inadvertently granted internet access, going undetected since April.

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks.

SplitVPN - 865,336 breached accounts.

HackerOne will require a verified government ID to submit to any bug bounty program on its platform. Every account, new and existing, managed or unmanaged.

Its docs, updated today, cite "regulatory requirements." Verification runs through Veriff and must be renewed yearly; sessions over a VPN or on a jailbroken device are rejected, and under-18s can't verify at all.

Their vulnerability disclosure program stays open with no ID.

Online ad firm Adform’s script compromised to steal cryptocurrency.

Italy's new facial recognition policy sparks EU law debate.

China is rapidly closing the satellite gap with the U.S., expanding its surveillance, navigation, and military space capabilities.

Its growing satellite network improves intelligence gathering, precision targeting, and tracking of U.S. forces, while advances in GPS alternatives, AI analysis, and anti-satellite weapons are raising concerns that Beijing could increasingly challenge U.S. military dominance in space.

Source: WSJ

CareCloud Data Breach Impacts Over 350,000.

South Korea fines telco giant KT $39 million for customer data breach.

UK Department for Education confirms data breach affecting over 600,000 records.

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction.

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk.

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm.

Former Trump campaign manager secured $46.5 million Israeli contract to weaponize AI chatbots to reshape Gaza narrative.

A detailed investigation published by Drop Site News reveals that Brad Parscale, a longtime digital adviser and former presidential campaign manager for Donald Trump, alongside his corporate entity Clock Tower X, signed a lucrative $46.5 million contract with the Israeli government.

The sprawling initiative deploys networks of purpose built websites and digital material designed to feed search indexing tools and automated data scrapers, a tactic aimed at forcing artificial intelligence models like ChatGPT, Claude, and Gemini to generate favorable framing regarding the US–Israeli relationship and Tel Aviv's military actions.

FARA filings show that the campaign was funneled through public relations intermediaries like Havas Media, originally scaling up from smaller digital budgets to target younger demographics across social platforms and conservative media ecosystems.

Meta's smart glasses could be banned in Germany and the rest of the EU.

Attackers took over N-central servers.

N-able says they reached customer endpoints through Take Control and left Cloudflare tunnels for persistent access. The first fix missed an alternate exploit path.

Hugging Face Diffusers can run code it was told not to trust.

Three high-severity flaws let crafted model repositories bypass trust_remote_code during custom pipeline loading.